Legal Document

Privacy Policy

Last updated: May 22, 2026

AeroFind AG ("AeroFind", "we", "us", or "our") takes the security and protection of aviation operational data and passenger personal data with the utmost seriousness. In an era of centralized public clouds, we champion 100% on-premises data sovereignty.

1. Core Principles of Data Sovereignty

Unlike traditional baggage systems that store and transmit personal records across global multi-tenant servers, AeroFind's system is built on a decentralized on-premises boundary:

  • Local Storage Only: All passenger data, Property Irregularity Reports (PIRs), and telemetry remain physically isolated within the host airport’s sovereign infrastructure.
  • Zero Shared Leakage: No database tables are uploaded to central analytics hubs. Customer profiles, claim sheets, and courier schedules are protected behind private system keys.

2. Categories of Information Processed

In compliance with IATA Resolution 753, we process passenger baggage identifiers to secure seamless transit tracking. Specifically, our system logs:

  • Passenger File Data: Full name, flight route, booking reference (PNR), baggage tag number, email address, and contact number.
  • Baggage Telemetry: Baggage category, material descriptions, color codes, custom flight itineraries, and passenger-uploaded photos of the items.
  • Courier Information: Shift coordinates, route logs, and digital signature records (Proof of Delivery).

3. Neural Matching & AI Processing

Our proprietary neural matcher runs locally on native machine models. This system automatically classifies baggage tag categories and calculates probabilistic matches. No passenger photos or descriptions are fed to external cloud APIs for training purposes. AI calculations execute isolated within the station’s boundaries.

4. Hard-Coded GDPR Anonymization

To protect passenger rights, the platform features native, automated security gates:

  • Auto-Anonymize: Upon successful baggage delivery and passenger confirmation, personal identifier columns in the PIR table are systematically overwritten with randomized hash values.
  • The Right to Forget: Ground support staff can trigger full database sanitization directly from the admin panel, instantly deleting the passenger's history while preserving anonymized count data for KPI reports.

5. Contact & Data Access

For questions regarding our privacy standard, database security blueprints, or to request access to the sovereign storage schemas under GDPR Chapter III, please contact our Data Protection Officer at support@aerofind.online.